mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-03 17:40:04 +00:00
2702809a4a
While secure boot permits only properly verified signed kernels to be booted, trusted boot calculates the file hash of the kernel image and stores the measurement prior to boot, that can be subsequently compared against good known values via attestation services. This patch reads the trusted boot state of a PowerNV system. The state is used to conditionally enable additional measurement rules in the IMA arch-specific policies. Signed-off-by: Nayna Jain <nayna@linux.ibm.com> Signed-off-by: Eric Richter <erichte@linux.ibm.com> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au> Link: https://lore.kernel.org/r/e9eeee6b-b9bf-1e41-2954-61dbd6fbfbcf@linux.ibm.com
29 lines
476 B
C
29 lines
476 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Secure boot definitions
|
|
*
|
|
* Copyright (C) 2019 IBM Corporation
|
|
* Author: Nayna Jain
|
|
*/
|
|
#ifndef _ASM_POWER_SECURE_BOOT_H
|
|
#define _ASM_POWER_SECURE_BOOT_H
|
|
|
|
#ifdef CONFIG_PPC_SECURE_BOOT
|
|
|
|
bool is_ppc_secureboot_enabled(void);
|
|
bool is_ppc_trustedboot_enabled(void);
|
|
|
|
#else
|
|
|
|
static inline bool is_ppc_secureboot_enabled(void)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
static inline bool is_ppc_trustedboot_enabled(void)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
#endif
|
|
#endif
|